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1  Introduction 

There  has  been  rapid  progress  in  developing  optical  quantum  technologies  that  address 
unsolved  problems  in  communications,  computation,  and  metrology.  Quantum  key  distri¬ 
bution  now  makes  it  possible  to  transmit  information  with  absolute,  unconditional  security. 
These  technologies  require  sophisticated  electro-optic  circuits,  which  are  presently  imple¬ 
mented  in  large  custom-made  bulk  optics.  There  now  exists  an  opportunity  to  translate 
optical  quantum  technologies  from  meter-sized  table-top  experiments  to  scalable  sub-mm 
monolithic  photonic  integrated  chips  (PICs),  leveraging  recent  advances  in  integrated  op¬ 
tics.  We  combine  quantum  information  processing  (QIP)  and  PIC  technology  and  a  quan¬ 
tum  photonic  integrated  chip  (QPIC)  architecture,  offering  densely  integrated  optical  and 
electronic  circuits  into  a  rapidly  reconhgurable  platform. 
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High-dimensional  quantum  key  distribution  (QKD)  [1]  allows  two  parties,  Alice  and  Bob, 
to  establish  a  secure  cryptographic  key  at  a  potentially  higher  rate  than  that  afforded  by 
standard,  two-dimensional  QKD  protocols  [2,  3].  When  the  photonic  states  are  described 
using  a  high-dimensional  Hilbert  space,  more  than  one  bit  of  information  can  be  generated 
when  a  single  photon  is  detected.  Additionally,  increasing  the  dimension  of  a  QKD  pro¬ 
tocol  provides  greater  resilience  to  noise  [4],  High-dimensional  QKD  protocols  have  been 
implemented  by  encoding  information  in  various  photonic  degrees  of  freedom,  including 
position-momentum  [5],  time  [6,  7,  8,  9],  energy-time  [10],  and  orbital  angular  momentum 
(0AM)  [11,  12,  13].  Dispersive  optics  QKD  (DO-QKD)  is  a  high-dimensional  QKD  protocol 
[14]  that  uses  energy-time  entanglement  of  pairs  of  photons. 

We  are  employing  the  QPIC  architecture  to  implement  a  novel  high-dimensional  disper¬ 
sive  optics  quantum  key  distribution  (DO-QKD)  protocol  which  offers  orders  of  magnitude 
speed-up  in  secure  communication  rate  compared  to  previous  QKD  implementations.  The 
DO-QKD  protocol  enables  the  generation  of  a  secret  key  between  two  parties  Alice  and  Bob 
using  high-dimensional  photon  encoding  that  enables  information  capacity  in  excess  of  10 
bits  per  photon.  Working  at  the  low-energy  limit  of  secure  communication,  we  will  also 
investigate  how  telecom  technology  can  be  leveraged  to  approach  the  classical  information 
capacity  of  optical  channels  under  bandwidth  and  optical  power  constraints. 

2  Dispersive  Optics  QKD  Protocol 

Numerous  degrees  of  freedom  of  photons  have  been  investigated,  including  position  mo¬ 
mentum,  time,  energy  time,  and  orbital  angular  momentum  (0AM).  Because  we  desired  a 
protocol  that  is  maximally  compatible  with  modern-day  hber  communications  systems,  we 
focused  on  the  use  of  temporal  encoding  of  information.  Using  a  high-dimensional  alphabet, 
the  DO-QKD  protocol  is  closely  analogous  to  pulse  position  modulation  (PPM)  to  maxi¬ 
mize  the  secret-key  capacity  under  technical  constraints  such  as  limited  numbers  of  photon 
produced  or  limited  number  of  detector  clicks  per  unit  time.  We  have  now  completed  a 
thorough  analysis  of  the  DO-QKD  protocol,  proving  security  against  collective  attacks.  To 
our  knowledge,  this  is  the  hrst  security  proof  for  a  high-dimensional  QKD  protocol  with  spe- 
cihc  physical  realization  of  the  qudits.  We  have  so  far  analyzed  security  in  the  asymptotic 
limit  of  inhnite  key  length  [15]  and  are  working  on  an  extension  of  the  protocol  to  capture 
hnite  key  length  effects,  to  be  discussed  in  Section  2.1  below.  The  approach  employed  pro¬ 
vides  a  general  framework  for  proving  the  security  of  protocols  employing  single  photons 
in  continuous  Hilbert  spaces  using  measures  of  the  covariance  matrix.  Although  we  focus 
the  discussion  on  a  scheme  employing  entangled  photon  pairs  generated  by  Alice  at  random 
times  by  spontaneous  parametric  down-conversion  (SPDC)  and  sent  to  Bob  over  a  quantum 
channel,  we  have  also  developed  variations  of  the  scheme  that  employ  single-photon  sources 
or  weak  classical  light.  We  estimate  that  practical  implementations  could  reach  a  secret-key 
capacity  of  >  4bits  per  character  of  distilled  key  (bpc)  with  transmission  across  over  200 
km  in  hber.  We  are  currently  extending  the  scheme  to  also  make  use  of  polarization  and 
frequency  degrees  of  freedom  to  scale  up  the  number  of  bits  per  photon. 
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2.1  Finite-key  analysis  for  arbitrary  basis  selection  probabilities 

The  security  proof  for  DO-QKD  presented  in  [14]  relied  on  the  asymptotic  limit:  Alice’s 
and  Bob’s  keys  were  assumed  to  be  inhnitely  long.  We  now  show  security  for  hnite-length 
keys.  To  do  this,  we  combine  elements  of  hnite-key  security  proofs  [16,  17,  18,  19,  20,  21] 
with  the  existing  security  analysis  for  DO-QKD.  We  also  allow  for  asymmetric  basis  selection 
[22]  to  increase  the  efficiency  of  the  protocol  by  increasing  the  probability  that  Alice  and  Bob 
measure  in  the  same  bases — a  consideration  that  was  unecessary  in  the  asymptotic  limit. 

In  the  earliest  QKD  protocols  [2,  3,  23],  Alice  and  Bob  selected  between  the  two  mea¬ 
surement  bases  with  equal  probabilities,  limiting  the  efficiency  to  at  most  50%.  It  was  later 
suggested  [22]  that  the  efficiency  of  a  QKD  protocol  could  be  increased  asymptotically  to 
100%  if  Alice  and  Bob  choose  one  measurement  basis  with  a  greater  probability  than  the 
other,  thereby  increasing  the  likelihood  that  Alice  and  Bob  will  make  measurements  in  the 
same  basis.  Furthermore,  Lo  et  al.  also  showed  that  equal  basis  selection  probabilities  are 
not  necessary  to  prove  the  security  of  a  QKD  protocol  [22]. 

If  an  eavesdropper.  Eve,  were  aware  of  Alice  and  Bob’s  basis  choice  probabilities,  she 
could  use  that  information  to  her  advantage:  By  choosing  to  eavesdrop  in  the  dominant 
basis,  she  could  gain  more  information  while  remaining  undetected.  In  order  to  prevent  this, 
Alice  and  Bob  must  slightly  modify  their  protocol:  They  divide  their  data  according  to  the 
measurement  basis  used,  and  they  estimate  parameters  separately  for  each  basis. 

When  implementing  DO-QKD  using  asymmetric  basis  selection,  we  assume  that  Alice 
and  Bob  choose  to  measure  in  the  ‘time  basis’  with  probability  p  >  1/2;  that  is,  Alice  and 
Bob  apply  dispersion  less  than  half  of  the  time.  Asymmetric  basis  selection  can  beneht  the 
key  generation  rate,  as  it  allows  the  lossy  dispersive  elements  to  be  used  less  frequently.  The 
exact  value  of  p  is  chosen  along  with  other  parameters  to  optimize  the  secure  key  capacity 
as  described  below. 

2.2  Finite-size  effects  on  secure  key  capacity 

Outside  the  asymptotic  limit,  a  QKD  protocol  can  never  be  completely  secure.  Instead, 
a  protocol  can  only  be  ^-secure,  where  e  is  the  tolerated  failure  probability  of  the  entire 
protocol.  The  security  parameter  e  is  the  sum  of  the  failure  probabilities  of  each  stage  of 
the  protocol: 

e  =  eec  +  £PA  +  £PE  +  £,  (1) 

where  Eec  is  the  probability  that  error  correction  fails,  Epa  is  the  probability  that  privacy 
amplihcation  fails,  and  Epe  is  the  probability  that  parameter  estimation  fails  [20].  The 
parameter  £  accounts  for  the  accuracy  of  estimating  the  smooth  min-entropy,  which  charac¬ 
terizes  the  amount  of  secure  information  that  can  be  extracted  using  privacy  amplihcation 

|16|. 

The  hnite-key  secure  key  capacity  (measured  in  bits/photon)  for  the  DO-QKD  protocol 
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can  then  be  written  as  [16,  17,  18,  19,  20,  21]: 


Tn  = 


Here  Too  is  the  secure  key  capacity  in  the  asymptotic  regime,  which  was  derived  in  Ref.  [14], 
N  is  the  number  of  instances  in  which  Alice  and  Bob  both  detect  a  single  photon  in  a 
frame.  The  subtracted  terms  on  the  right-hand  side  of  Eq.  (2)  represent  the  corrections 
required  in  the  finite-key  length  regime.  The  factor  n/N  reflects  the  fact  that  not  all  of  the 
signals  exchanged  and  detected  by  Alice  and  Bob  go  toward  forming  the  key  since  some  of 
the  exchanged  signals  must  be  sacrihced  for  parameter  estimation.  The  parameter  n  =  p^N 
denotes  the  number  of  times  that  Alice  and  Bob  both  chose  the  time  basis.  Here,  we  assumed 
that  measurements  made  in  the  ‘time  basis’  are  used  for  the  key  and  measurements  made 
in  the  dispersed  basis  are  used  for  parameter  estimation.  We  take  m  =  (1  —p^N  to  denote 
the  number  of  times  that  Alice  and  Bob  both  chose  the  ‘dispersed  time  basis’.  For  each 
value  of  N,  we  maximize  hj  optimizing  the  parameter  set  {epa,  Epe,  e,  p}.  The  security 
parameter  e  is  determined  beforehand  by  Alice  and  Bob’s  security  requirements,  and  Epc 
is  hxed  by  the  choice  of  error  correction  code.  Additionally,  the  calculation  of  r^o  must  be 
modified  to  include  the  effects  of  hnite  key  length  on  parameter  estimation. 


n  f  1  ,  2  2  ,  1 

^  roo - log - log - 

N  \  n  Eec  n  Epa 


(2) 


2.3  Modified  asymptotic  secure  key  capacity  and  parameter  esti¬ 
mation 

The  asymptotic  secure  key  capacity  Too, do  was  originally  calculated  [14]  as 


r^  =  pi{A;B)-x{A-E), 


(3) 


where  [3  is  the  efficiency  of  the  error  correction,  /(A;  B)  is  Alice  and  Bob’s  mutual  informa¬ 
tion,  and  x(A;  E)  is  Eve’s  Holevo  information.  Since  Alice  and  Bob  use  only  measurements 
made  in  the  ‘time  basis’  for  the  key,  the  mutual  information  is  calculated  using  only  the 
contribution  from  the  ‘time  basis’. 

The  Holevo  information,  accounting  for  the  possibility  that  Eve  could  use  a  biased  eaves¬ 
dropping  strategy,  is  given  by 


X(A;E)  =S{pe)  -Pe 


-  (1  -  Pd) 


dtp{tA  =  t)S{pE\tA=t) 
dup{uA  =  U})S{Pe\u;a=co), 


(4) 


where  S{p)  is  the  von  Neumann  entropy  of  the  quantum  state  p,  p(tA  =  t)  is  the  probability 
density  for  Alice  to  measure  tA  in  the  ‘time  basis’,  p{ua  =  is  the  probability  density 
for  Alice  to  measure  ua  in  the  ‘dispersed  time  basis’,  and  pe  is  the  probability  with  which 
Eve  chooses  to  eavesdrop  in  the  ‘time  basis’.  We  assume  that  pp  is  independent  of  Alice 
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and  Bob’s  choice  of  p.  We  find  that  the  contributions  to  the  Holevo  information  from  each 
measurement  basis  are  equal;  thus,  the  Holevo  information  is  unaffected  by  asymmetric  basis 
selection. 

To  calculate  the  Holevo  information,  Alice  and  Bob  must  determine  the  covariance  matrix 
of  their  data.  The  covariance  matrix  contains  two  parameters  that  must  be  estimated:  77, 
the  decrease  in  correlations,  and  e,  the  excess  noise.  Alice  and  Bob  can  obtain  values  for  77 
and  e  by  using  their  data  to  estimate  a  single  parameter,  =  (1  +  ^  quantihes 

the  increase  in  their  photons’  correlation  time  from  a  cm-  to  given  in  Ref.  [15]. 

Alice  and  Bob  must  sample  part  of  their  data  and  use  it  to  make  estimates  about  the 
entire  dataset.  In  the  hnite-size  regime,  it  is  important  to  know  how  well  their  estimate 
represents  the  entire  dataset.  Since  Alice’s  (Bob’s)  measured  time,  Ta  (Tb),  is  a  Gaussian- 
distributed  random  variable,  the  difference  (Ta  —  Tb)  is  also  Gaussian-distributed,  and  thus 
its  variance,  =  VAR(Ta  —  Tb),  can  be  found  using  the  distribution: 

X^{l-epE,m-l)  =  (m-l)^.  (5) 

cor 

An  upper  bound  on  is  then  given  by  [21]: 

2 

«or-,max)^  =  ^lor  +  ^  erf-^(l  -  (6) 


This  bound  is  valid  for  the  conhdence  interval  1  —  Epe-  Then,  the  largest  possible  estimate 
for  ^  within  the  conhdence  interval  is 

*  _  cor, max 

^max  —  o 

^  cor 

Now,  Alice  and  Bob  can  use  their  estimate  for  ^max  to  calculate  the  most  pessimistic  secure 
key  capacity.  Fig.  1  plots  the  secure  key  capacity  for  DO-QKD  in  the  hnite  regime,  using 
asymmetric  basis  selection.  Finite-size  effects  only  matter  for  low  N,  and  the  most  signihcant 
effect  is  due  to  the  parameter  estimation. 


3  Security  using  a  Pranson  Interferometer 

The  team  has  also  been  working  on  security  analysis  -  and  a  security  proof  -  for  high¬ 
dimensional  quantum  key  distribution  (HD-QKD)  that  uses  time-energy  entanglement.  We 
are  considering  the  use  of  a  Franson  interferometer  -  to  infer  mean-squared  frequency  error 
between  signal  and  idler  measurements  -  and  a  conjugate  Franson  interferometer  -  to  infer 
mean-squared  timing  error  between  signal  and  idler  measurements.  In  both  cases,  the  use  of  a 
decoy-state  protocol  will  enable  those  mean-squared  errors  to  be  calculated  for  the  biphoton 
manifold.  Then,  using  a  worst-case  analysis  based  on  the  time-frequency  covariance  matrix, 
a  bound  on  Eve’s  information  can  be  obtained  from  which  a  secure  key  rate  can  be  calculated. 
This  analysis  is  still  underway,  but  when  it  is  completed  it  will  provide  a  useful  alternative 
to  the  mutually-unbiased  basis  approach  using  dispersive-optics  QKD  [15]. 
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Figure  1:  Plot  of  DO-QKD  finite-size  secure  key  capacities  assuming  Alice  and  Bob  observe 
=  l.lacor  and  detector  jitter  =  2ocorl‘i,  where  Ocor  is  the  correlation  time.  The  security 
parameter  is  £  =  10“®,  and  the  failure  probability  of  the  error  correction  is  Eec  =  10“^°.  All 
other  parameters  were  chosen  to  match  [14].  From  top  to  bottom:  d  =  64,  d  =  32,  d  =  16, 
d  =  8. 


Figure  2:  Comparison  of  DO-QKD  hnite-size  secure  key  capacity  (right)  and  p  =  probability 
of  choosing  the  ‘time  basis’  (left)  for  d  =  8. 
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channel  length  (km) 

Figure  3:  Finite-size  secure  key  capacities  versus  channel  length  (loss)  for  different  numbers 
of  signals  exchanged,  N.  d  =  8  for  all;  other  parameters  same  as  Fig.  1  and  [14], 


3.1  High-dimensional  spectral  encoding 

With  the  frequency  basis  two-photon  state,  we  have  now  completed  the  Franson  mea¬ 
surement  with  the  4.2-nm  delay  line,  for  Franson  interference  visibility  up  to  97.2%  for 
the  time-bin  measurements.  For  increasing  delay,  the  falloff  in  the  visibility  goes  to  93.4% 
and  86.5%  for  the  higher-order  time-bins,  matching  well  with  predictions.  The  correlated 
two-photon  state  demonstrates  a  high-dimensional  16-bin  entanglement,  through  a  revival 
of  the  Hong-Ou-Mandel  interference.  Hyperentanglement  of  the  two-photon  state  has  been 
examined  by  our  team,  and  will  be  completed  through  a  higher-dimensional  correlation  mea¬ 
surement. 


4  Experimental  QKD  Developments 

We  have  completed  the  following  milestones  towards  the  QKD-demos. 

•  Demonstrated  high-dimensional  QKD  in  two  different  conhgurations  each  of  which  in¬ 
cludes  both  key  generation  using  multiple  time  bins  per  measurement  time  frame  and 
dispersion-compensated  Franson-interferometric  security  checks.  One  protocol  uses 
SPDC  to  generate  time-energy  entangled  photon  pairs.  The  protocol,  with  coincidence 
detection  using  InGaAs  single-photon  detectors  and  an  efficient  layered  low-density 
parity-check  (LDPC)  error-correction  code  to  reconcile  the  sequence  of  symbols  be¬ 
tween  Alice  and  Bob,  yields  1.9  secure  bits  per  pair  coincidence  after  privacy  amplih- 
cation.  The  QKD  throughput  is  currently  83  kbits/s  that  is  limited  by  the  duty  cycle 
and  efficiency  of  the  self-differencing  InGaAs  detectors.  Random  switching  between 
key  generation  and  security  checks  is  accomplished  using  passive  beam  splitters  by 
Alice  and  by  Bob.  We  expect  a  100-fold  improvement  in  the  secure  key  rate  if  WSi 
superconducting  or  high-efficiency  NbN  nanowire  detectors  are  deployed  in  our  setup. 
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•  The  second  QKD  protocol  utilizes  weak  classical  broadband  noise  from  amplified  spon¬ 
taneous  emission  (ASE)  of  an  unseeded  EDFA  to  prepare  time-bin  encoded  bits  through 
single-photon  pulse-position  modulation.  It  also  uses  SPDC’s  entangled  photons  with 
the  same  bandwidth  as  the  ASE  source  for  Franson  security  checks.  Random  switch¬ 
ing  between  the  ASE  source  and  the  SPEC  source  by  Alice  allows  Alice  and  Bob  to 
perform  Franson-interferometric  measurements  with  the  SPEC  output  to  monitor  the 
security  of  the  quantum  channel.  In  this  hybrid  source  protocol,  we  have  achieved 
2.9  secure  bits  per  photon  and  a  high  QKE  throughput  of  7.3  Mbits/s  using  InGaAs 
detectors  gated  at  1.26  GHz.  We  estimate  that  we  should  be  able  to  achieve  a  key  rate 
of  33  Mbits/s  at  ~6  secure  bits  per  coincidence  if  WSi  detectors  are  used  in  the  setup, 
assuming  50  ns  reset  time  and  150  ps  timing  resolution  for  the  WSi  detectors. 

4.1  QPIC  Development 

We  measured  propagation  loss  within  the  waveguide  is  below  2.5dB/cm;  this  will  be  low¬ 
ered  using  low-conhnement  Si  waveguides  with  propagation  losses  expected  below  1  dB/cm. 
Fig.4.1(b-d)  shows  several  of  the  of  PIG  components:  a  directional  waveguide  couplers  as 
needed  in  the  arrayed  waveguide  grating;  an  inverse  tapered  polymer-waveguide  coupler  for 
efficient  mode  conversion  from  an  optical  hber  to  the  Si  waveguide;  and  multi- ring  add/drop 
hlters. 
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Figure  4:  (a)  Schematic  of  a  16-channel  dynamic  pulse  shaper  using  arrayed  waveguide 
gratings  (mux/demux)  and  controllable  phases  A0j.  The  PIG  includes  directional  couplers 
(b),  inverse  tapered  waveguide  couplers  (c),  and  add/drop  hlters  consisting  of  single  or 
coupled  rings,  as  shown  in  (d). 


A  fourth-generation  PIG  has  been  fabricated  with  integrated,  tunable  group  velocity 
dispersion  elements.  This  PIG  enables  simultaneous  EO-QKE  channels  to  operate  over  up 
to  four  frequency  channels  on  the  same  spatial  mode.  The  PIG  is  outht  with  electrical 
connections  to  implement  SNSPE  detectors  on-chip,  as  recently  successfully  demonstrated 
by  our  team. 

In  addition,  the  wavelength-division-multiplexed  quantum  chip  has  been  prepared.  A 
slight  delay  on  the  hnal  etch  setup  (for  the  couplers)  is  due  to  a  missing  deep-UV  reticle 
mask,  but  should  be  completed  by  this  coming  week. 


4.2  SNSPD  Detector  Development 

In  the  last  two  months  we  have  improved  the  performance  of  the  detectors  and  the  closed- 
cycle  cryostat  used  to  measure  the  waveguide-integrated  detectors.  Waveguide-detectors:  We 
fabricated  detectors  with  sub-25-ps  timing  jitter  and  saturated  detection  efficiency  (close  to 
the  calculated  optical  absorption).  This  was  achieved  by  (1)  reducing  the  exposure  time 
of  bare  niobium  nitride  (NbN)  to  TMAH,  a  base  used  as  HSQ  resist  developer  which  can 
degrade  NbN,  and  (2)  direct  heating  of  the  back  of  the  SiNx  substrates  during  the  NbN 
growth  process,  which  resulted  in  increased  critical  temperature  compared  to  dims  grown 
with  the  same  deposition  time  but  without  direct  heating.  These  changes  resulted  in  a  higher 
critical  current  density  (higher  signal-to-noise  ratio)  of  our  recent  detectors. 

Fig.  4.2(a)  shows  the  detection  efficiency  vs  bias  current  for  a  recent  detector  based  on  a 
parallel-nanowire  structure  (‘series- 2-SNAP’  based  on  84-nm-wide  nanowires).  The  detec¬ 
tion  efficiency  was  measured  at  2.4  K  in  a  cryogenic  probe  station  using  an  incoherent  CW 
source.  The  detector  shows  a  characteristic  ‘saturation  plateau’  with  a  detection  efficiency 
value  close  to  the  calculated  optical  absorption  of  11-12%  (extracted  from  simulation  re¬ 
sults).  Due  to  the  high  signal-to-noise  ratio  we  could  measure  a  timing  jitter  of  24ps  for  these 
detectors,  which  is  ~5-10ps  lower  than  the  timing  jitter  values  our  previous  generation  of 
waveguide-detectors.  Closed-cycle  cryostat:  In  collaboration  with  Montana  Instruments  we 
replaced  four  RF  channels  in  the  cryostat  with  low-loss  semi-rigid  RF  cables  which  provided 
2-6dB/m  attneuation  at  0.5-5GHz,  a  resulting  in  a  significant  improvement  of  the  signal 
amplitude  compared  to  the  previous  RF  lines  (13-40dB/m  at  0.5-5GHz).  Furthermore,  as 
shown  in  Fig.  1(c),  we  measured  the  detector  signal  using  miniature  coaxial  lines  directly 
connected  to  the  printed  circuit  board,  which  resulted  in  an  improved  noise  base  of  the  signal 
compared  to  the  previous  solution  which  relied  on  RF  cables  that  were  directly  soldered  to 
the  PCB.  Harnessing  the  higher  signal-to-noise  ratio  we  recently  measured  sub-30-ps  timing 
jitter  (Figure  1(d))  in  the  closed-cyle  cryostat.  For  these  measurements  the  detectors  were 
front-illuminated  with  a  mode-locked  picosecond-pulsed  laser.  We  are  currently  preparing  a 
photonic  integrated  chip  with  waveguide-detectors  which  will  allow  us  to  couple  light  into 
the  detector  through  the  waveguides. 

5  Publications  and  Presentations 

Tian  Zhong  of  MIT  presented  a  poster  on  the  dispersion  compensation  for  the  Fran- 
son  interferometer  at  the  11th  Gonference  on  Quantum  Gommunication,  Measurement,  and 
Gomputing  in  Vienna,  Austria,  August  2012. 

5.1  Journal  Publications 

•  Directional  free-space  coupling  from  photonic  crystal  waveguides,  G.-G.  Tsai,  J.  Mower, 
and  D.  Englund,  Optics  Express  19  (21),  20586-96  (2011) 

•  Efficient  generation  of  single  and  entangled  photons  on  a  silicon  photonic  integrated 
chip,  J.  Mower  and  D.  Englund,  Phys.  Rev.  A  84,  052326  (2011) 
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Figure  5:  (a)  Back-illuminated  device  detection  efficiency  vs  bias  current  for  a  series-2- 
SNAP  based  on  ~84-nm-wide  nanowires.  The  incident  photon  flux  was  varied  between  830 
k  photons/second  (black)  and  13  M  photons/second  (brown).  The  inset  shows  the  voltage 
trace  of  the  output  pulse  at  a  bias  current  of  22  pA.  (b)  Instrument  response  function  (IRF) 
of  the  same  detector  as  in  (a)  biased  at  22  pA.  (c)  Image  of  sample-holder  with  detector  chip 
and  miniature  RF  (UMC)  connections,  (d)  IRF  of  a  detector  using  the  setup  shown  in  (c). 
The  detector  reached  ~26ps  FWHM  timing  jitter  when  biased  at  22  pA. 


•  Wavelength  Division  Multiplexed  Quantum  Key  Distribution,  J.  Mower,  F.  Wong,  J. 
Shapiro,  D.  England,  ArXiv:1110.4867  (2011) 

•  Zero  phase  delay  in  negative-index  photonic  crystal  superlattices,  S.  Kocaman,  M.S. 
Aras,  P.  Hsieh,  J.  F.  McMillan,  C.  G.  Biris,  N.  C.  Panoiu,  M.  B.  Yu,  D.  L.  Kwong,  A. 
Stein,  and  C.  W.  Wong,  Nature  Photonics  5,  499  (2011). 

•  High-dimensional  quantum  key  distribution  using  dispersive  optics,  J.  Mower,  P.  Des¬ 
jardins,  J.  H.  Shapiro,  D.  England,  Phys.  Rev.  Lett.  A  87  (2013). 

•  Private-Capacity  Bounds  for  Bosonic  Wiretap  Channels,  Ligong  Wang,  Jeffrey  H. 
Shapiro,  Nivedita  Chandrasekaran,  and  Gregory  W.  Wornell,  ArXiv:  1202. 1126  (2012) 

•  “Efficient  single-spatial-mode  periodically  poled  KTiOP04  waveguide  source  for  high¬ 
dimensional  entanglement-based  quantum  key  distribution.”  Co-authors  include  Alessan¬ 
dro  Restelli  and  Josh  Biefang  of  NIST.  Manuscript  is  under  NIST  review;  we  expect 
to  submit  it  to  Optics  Express  in  early  September. 

•  Nanophotonic  Filters  and  Integrated  Networks  in  Flexible  2D  Polymer  Photonic  Crys¬ 
tals,  X.  Gan,  H.  Clevenson,  C.-C.  Tsai,  L.  Li,  and  D.  England,  to  appear  in  Nature 
Scientihe  Reports  (2013) 
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5.2  Conference  Papers 

•  T.  Zhong,  F.  N.  C.  Wong,  A.  Restelli,  and  J.  C.  Biefang,  “Efficient  single-spatial- 
mode  PPKTP  waveguide  source  for  high  dimensional  entanglement-based  QKD,”  to 
be  presented  at  CLEO/QELS  2012,  paper  JThlKS. 

•  eT.  Zhong  and  F.  N.  C.  Wong,  ’’Franson  interferometry  with  99.6%  visibility  via 
hberoptic  dispersion  engineering,”  in  11th  International  Conference  on  Quantum  Com¬ 
munication,  Measurement  and  Computing,  Vienna,  Austria,  July  2012,  paper  accepted 
for  presentation. 

•  D.  Englund  and  J.  Mower,  “Quantum  Optics  on  Silicon  Photonic  Chips”,  Invited  Paper 
at  Frontiers  In  Optics  (San  Jose,  CA,  Oct.  18,  2011) 

•  On  High-Efficiency  Optical  Communication  and  Key  Distribution,  Yuval  Kochman 
and  Gregory  W.  Wornell,  ITA,  San  Diego  (2012) 

•  Private-Capacity  Bounds  for  Bosonic  Wiretap  Channels,  Ligong  Wang,  Jeffrey  H. 
Shapiro,  Nivedita  Chandrasekaran,  and  Gregory  W.  Wornell,  submitted  to  IEEE  In¬ 
ternational  Symposium  on  Information  Theory  (2012) 

•  F.  N.  C.  Wong,  ’’Time-energy  entangled  waveguide  source  for  high-dimensional  QKD,” 
in  Laser  Science  XXVII,  San  Jose,  CA,  October  2011,  invited  paper  LTUF4. 

•  J.  Mower  and  D.  Englund,  “High-dimensional  quantum  key  distribution  using  disper¬ 
sive  optics,”  submitted  for  Frontiers  in  Optics,  Rochester,  NY,  2012 
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